@tertaut/sdk 0.1.0

package/dist/types.d.ts

@@ -0,0 +1,136 @@
+export type AppType = 'WEB_APP' | 'CHROME_EXTENSION' | 'DESKTOP' | 'ANDROID_APK' | 'CLI';
+export type ActivationType = 'MACHINE_BIND' | 'DOMAIN' | 'CHROME_IDENTITY' | 'DEEP_LINK';
+export interface SdkOptions {
+    /** Base URL Tertaut (opsional, default: "https://tertaut.com" atau process.env.TERTAUT_API_URL). */
+    apiUrl?: string;
+    /** Kunci lisensi pembeli (opsional jika sudah diaktivasi dan disimpan di storage). */
+    licenseKey?: string;
+    /** Access token JWT sesi (auth via Authorization: Bearer). */
+    accessToken?: string;
+    /** Default product slug untuk proteksi dan validasi. */
+    productSlug?: string;
+    /** Default product ID untuk proxy AI shield. */
+    productId?: string;
+    /** Toleransi offline token (default: 3 hari / 259,200,000 ms). */
+    offlineGracePeriodMs?: number;
+    /** Custom storage adapter (default: universal automatic storage). */
+    storage?: import('./storage.js').LicenseStorage;
+}
+export interface JwkRsa {
+    kty: 'RSA';
+    kid: string;
+    use?: string;
+    alg?: string;
+    n: string;
+    e: string;
+}
+export interface JwksResponse {
+    keys: JwkRsa[];
+}
+/** Hasil normalisasi API dari activationPayload backend. */
+export interface ActivationResult {
+    valid: boolean;
+    status: string;
+    key: string;
+    appType: string;
+    productName: string;
+    productSlug: string;
+    durationDays: number | null;
+    maxDevices: number;
+    devicesUsed: number;
+    devices: unknown[];
+    expiresAt: string | null;
+    offlineToken?: string | null;
+}
+export interface ValidationResult {
+    valid: boolean;
+    status: string;
+    key?: string | null;
+    expiresAt?: string | null;
+    appType?: string;
+    productName?: string;
+    productSlug?: string;
+    isOfflineGraceValid?: boolean;
+    claims?: Record<string, unknown>;
+}
+export interface OfflineVerifyResult {
+    valid: boolean;
+    status: 'ACTIVE' | 'EXPIRED';
+    claims: Record<string, unknown>;
+    expiresAt: string | null;
+}
+export interface UsageResult {
+    tokensUsed: number;
+    requestCount: number;
+    quota: number | null;
+    blocked: boolean;
+    periodStart: string | null;
+}
+/** Status komprehensif hasil pengecekan lisensi via `tertaut.guard()`. */
+export interface LicenseCheckResult {
+    /** True jika lisensi aktif dan sah (baik via server online maupun verifikasi offline RS256). */
+    valid: boolean;
+    /** Status lisensi: ACTIVE, EXPIRED, NOT_ACTIVATED, OFFLINE_GRACE, SUSPENDED, INVALID */
+    status: 'ACTIVE' | 'EXPIRED' | 'NOT_ACTIVATED' | 'OFFLINE_GRACE' | 'SUSPENDED' | 'INVALID';
+    /** Kunci lisensi yang digunakan. */
+    key?: string;
+    /** Nama software / produk. */
+    productName?: string;
+    /** Slug software. */
+    productSlug?: string;
+    /** Tanggal masa kedaluwarsa lisensi (ISO string), atau null bila Lifetime. */
+    expiresAt?: string | null;
+    /** True jika validasi dilakukan tanpa internet berbasis RS256 token offline. */
+    offline: boolean;
+    /** Alasan jika lisensi tidak valid / kedaluwarsa. */
+    reason?: string;
+    /** Perangkat yang sedang terdaftar. */
+    devicesUsed?: number;
+    /** Batas maksimal perangkat. */
+    maxDevices?: number;
+    /** Data klaim payload lisensi (fitur, tiers, metadata). */
+    claims?: Record<string, unknown>;
+}
+export interface ProtectOptions {
+    /** Kunci lisensi (opsional, jika tidak diberikan akan dibaca dari cache storage). */
+    key?: string;
+    /** Slug produk Tertaut. */
+    productSlug?: string;
+    /** Paksa validasi ke server online (abaikan cache offline sesaat). */
+    forceRemote?: boolean;
+    /** Callback opsional jika lisensi ternyata tidak valid. */
+    onInvalid?: (result: LicenseCheckResult) => void | Promise<void>;
+}
+export interface AiMessage {
+    role: 'system' | 'user' | 'assistant' | string;
+    content: string;
+}
+export interface AiChatOptions {
+    /** Nama model AI (misal: 'gpt-4o-mini', 'claude-3-5-sonnet-20241022', 'gemini-1.5-flash'). */
+    model: string;
+    /** Riwayat pesan chat. */
+    messages: AiMessage[];
+    /** ID produk di Tertaut (opsional jika sudah diset di createClient). */
+    productId?: string;
+    /** Provider AI (opsional: OPENAI, ANTHROPIC, OPENROUTER, GEMINI). */
+    provider?: string;
+    /** Mode streaming response. */
+    stream?: boolean;
+    /** Nilai temperature (kreativitas model). */
+    temperature?: number;
+    [key: string]: unknown;
+}
+export interface AiChatResponse {
+    /** Teks balasan dari AI langsung (string). */
+    text: string;
+    /** Raw JSON payload dari response proxy. */
+    raw: any;
+    /** Model yang digunakan. */
+    model?: string;
+    /** Token usage (jika dikembalikan oleh model). */
+    usage?: {
+        promptTokens?: number;
+        completionTokens?: number;
+        totalTokens?: number;
+    };
+}

package/dist/types.js

@@ -0,0 +1 @@
+export {};

package/dist/webhooks.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Helper verifikasi webhook untuk Tertaut MDaaS.
+ * Mendukung Node.js, Bun, Edge Runtime, Cloudflare Workers, dan Next.js API Routes.
+ */
+export interface WebhookVerifyOptions {
+    /** Raw body string (sebelum di-JSON.parse). */
+    rawBody: string;
+    /** Nilai dari header 'x-tertaut-signature'. */
+    signature: string;
+    /** Webhook secret yang disetting di dashboard Tertaut. */
+    secret: string;
+}
+export declare const webhooks: {
+    /**
+     * Verifikasi signature webhook dari Tertaut.
+     * @example
+     * const isValid = await tertaut.webhooks.verify({
+     *   rawBody: req.body,
+     *   signature: req.headers['x-tertaut-signature'],
+     *   secret: process.env.TERTAUT_WEBHOOK_SECRET
+     * })
+     */
+    verify(opts: WebhookVerifyOptions): Promise<boolean>;
+};

package/dist/webhooks.js

@@ -0,0 +1,43 @@
+/**
+ * Helper verifikasi webhook untuk Tertaut MDaaS.
+ * Mendukung Node.js, Bun, Edge Runtime, Cloudflare Workers, dan Next.js API Routes.
+ */
+const encoder = new TextEncoder();
+async function hmacSha256Hex(secret, data) {
+    const subtle = globalThis.crypto?.subtle;
+    if (!subtle) {
+        // Fallback Node crypto
+        const nodeCrypto = await import('node:crypto').catch(() => null);
+        if (nodeCrypto) {
+            return nodeCrypto.createHmac('sha256', secret).update(data).digest('hex');
+        }
+        throw new Error('WebCrypto atau node:crypto diperlukan untuk memverifikasi webhook');
+    }
+    const key = await subtle.importKey('raw', encoder.encode(secret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+    const signatureBytes = await subtle.sign('HMAC', key, encoder.encode(data));
+    return Array.from(new Uint8Array(signatureBytes))
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join('');
+}
+export const webhooks = {
+    /**
+     * Verifikasi signature webhook dari Tertaut.
+     * @example
+     * const isValid = await tertaut.webhooks.verify({
+     *   rawBody: req.body,
+     *   signature: req.headers['x-tertaut-signature'],
+     *   secret: process.env.TERTAUT_WEBHOOK_SECRET
+     * })
+     */
+    async verify(opts) {
+        if (!opts.rawBody || !opts.signature || !opts.secret)
+            return false;
+        try {
+            const computed = await hmacSha256Hex(opts.secret, opts.rawBody);
+            return computed.toLowerCase() === opts.signature.trim().toLowerCase();
+        }
+        catch {
+            return false;
+        }
+    },
+};

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@tertaut/sdk",
+  "version": "0.1.0",
+  "description": "Tertaut MDaaS SDK — Universal Licensing Engine (Web/Chrome/Desktop/Android), AI API Proxy Shield client, dan helper verifikasi offline (RS256).",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "prepublishOnly": "npm run build"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./chrome": {
+      "types": "./dist/chrome.d.ts",
+      "import": "./dist/chrome.js"
+    },
+    "./desktop": {
+      "types": "./dist/desktop.d.ts",
+      "import": "./dist/desktop.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "tertaut",
+    "mdaas",
+    "licensing",
+    "software-license",
+    "machine-binding",
+    "ai-proxy",
+    "token-metering",
+    "webhooks"
+  ],
+  "author": "PT Retas Lintas Batas <dev@tertaut.com>",
+  "homepage": "https://tertaut.com",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/crediblemark-official/tertaut.git",
+    "directory": "packages/sdk"
+  },
+  "license": "MIT",
+  "engines": {
+    "node": ">=18"
+  }
+}